hualiglobal/kirimel-php-sdk

Repo commit activitydanger

There were no commits and no active maintainers during the last three months, which is meaningful abandonment risk for a package only 203 days old.

Release historycaution

Six releases appeared during the package's 203-day lifetime, but the latest release was about four months ago, leaving no recent maintenance evidence.

Repo toolingcaution

Composer build tooling is present, but no security scanning tools were detected, leaving a notable verification gap.

Security policycaution

The repository has no security policy, so users have no documented path for reporting vulnerabilities or understanding the project's response process.

Workflow auditcaution

All six action references are unpinned, and the audit found a high-confidence template-injection pattern in the publishing workflow. No untrusted checkout or script-injection trigger was observed, so this is a workflow hygiene concern rather than a severe standalone risk.